[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • assets/js/modules/d3/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-D3COLOR-1076592	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: d3-brush

The new version differs by 83 commits.

• ec2bce6 3.0.0
• 9741b14 create emit before we use it; make move accept an event. (#84)
• 6586462 Adopt type=module (#86)
• a9bd39e v2.1.0
• a7b4524 Merge pull request #75 from woutervh-/pass-mode-to-event-listeners
• 13642ce v2.0.1
• 9b28a8b Merge branch 'master' into pass-mode-to-event-listeners
• 4a349c2 Update src/brush.js
• d458012 Update src/brush.js
• 0b63ae6 Update src/event.js
• 0ee1091 missing sourceEvent in brush start
• 256b692 Updated README to include mode value
• 2db1bfc Merge branch 'master' into pass-mode-to-event-listeners
• 19ca758 v2.0.0
• 940a910 d3 dependencies
• 89cdbf1 Merge pull request #71 from d3/two
• 7c812ae Merge branch 'master' into two
• 3b5c882 Send mode.name to BrushEvent instead of mode object
• 509bd25 Remove mode where it doesn't exist
• 3087061 Pass along mode to BrushEvent
• 9ed5460 v1.1.6
• 035f470 v2.0.0-rc.1
• 4d5cfc0 remove brushEvent.on for now
• b9a82d5 test transition vs selection

See the full diff

Package name: d3-color

The new version differs by 76 commits.

• 611e1c3 3.0.0
• 4c2be7e Adopt type=module (#90)
• 017a463 v2.0.0
• 7de7354 Merge pull request #75 from d3/two
• 0ecd740 v2.0.0-rc.1
• 0eb9594 Merge pull request #76 from d3/radians
• cc0a51b Merge pull request #77 from d3/document-extensions
• fd23843 document extensions
• d86e36b link to https://d3js.org/d3-color.v2.min.js
• c1b93f1 normalize "degrees" and "radians" for deg2rad conversions
• 693572b deliberate ES6 syntax
• e87dc62 1.4.1
• f176ff1 Fix hexadecimal transparent colors.
• df60378 Add link to d3-hsluv.
• acf4da1 Bump eslint-utils from 1.4.0 to 1.4.3
• 0b12fa0 1.4.0
• d0a60ee Add sideEffects: false. Related Add sideEffects: false to package.json.  d3/d3#3131.
• fd380cd Consolidate code.
• 6d5e89c fix test name
• 39f06c9 clean up
• 69f8382 Update README.md
• 7a4982b Add support for 4 and 8 digit hex codes
• bff4aa3 Update README.
• 1a9e612 Update README.

See the full diff

Package name: d3-interpolate

The new version differs by 87 commits.

• 38346a4 3.0.0
• 47f9564 Adopt type=module (#93)
• e8cddfd Update README.
• df0475a v2.0.1
• 0ef66dc Merge pull request #88 from d3/two
• 1d48123 v2.0.0-rc.1
• 2db2773 avoid CIRCULAR_DEPENDENCY warning
• 17d8bcb Merge pull request #90 from d3/piecewise-default-interpolator-80
• 0c80cbc piecewise(values) defaults to d3.interpolate
• 57e87dc deliberate ES6 syntax
• 2b9596c version numbers
• 77b7f74 Merge branch 'zoom-rho' into two
• 4b1156f Merge branch 'DOMMatrix' into two
• 1954d05 zoomInterpolate.rho() has no getter
• b1074db Merge branch 'master' of https://github.com/d3/d3-interpolate
• a044425 url for "Gamma error in picture scaling"
• 794ce05 document interpolateZoom.rho
• 8b3594e unit tests
• aa991e4 rho getter
• a4dd859 the movement’s duration should not explode for small curvatures, and should be longer when the curvature is important
• 098c2ed avoid crashing on low curvatures (rho=1e-3 gives a good approximation of a linear transform)
• abfc0ae Merge branch 'master' into zoom-rho
• 6c8db19 disable eslint error on undefined DOMMatrix and WebKitCSSMatrix
• 975936b Merge branch 'master' into DOMMatrix

See the full diff

Package name: d3-scale

The new version differs by 177 commits.

• f7cb35b 4.0.0
• 120ad7a adopt InternMap for ordinal scales (#237)
• ac30873 Adopt type=module (#246)
• 2b7db62 3.3.0
• f3cfd2c update dependencies
• 80ff9b2 adopt d3-time’s ticks
• 8afe6bd 3.2.4
• 60e10c4 update dependencies
• 116ac06 Treat null as undefined. (#241)
• c7efc99 3.2.3
• 5d3e9c3 Update d3-array.
• 1ff6522 yarn
• 957482b Update tickFormat.js
• 42d546e scaleQuantile performance fixup
• 0a427eb time_copy is part of the API but was missing from the README
• 1dd3f5a Merge pull request #219 from d3/links-v6
• 8460207 v3.2.2
• 6169111 d3 dependencies
• 0a55cc8 Merge pull request #210 from domoritz/fix-nice
• 5046251 links to d3@6 versions
• d0a2fe4 fix documentation: the diverging scale's default domain is [0, 0.5, 1]
• da99948 Use var
• 0932d15 Merge pull request #211 from oluckyman/patch-1
• 2751067 Fix a typo

See the full diff

Package name: d3-transition

The new version differs by 80 commits.

• 98e84f0 3.0.0
• aa44264 Update README
• 692f025 fix #121; add transition.selectChild[ren]
• 1ac7984 Precise sideEffects. (#115)
• d1a518c Adopt type=module (#123)
• abe6511 Merge pull request #122 from inokawa/patch-1
• a71a58d Fix typo in README.md
• 40d5865 d3 dependencies
• 2fa17ff v2.0.0
• 611e427 Merge pull request #94 from d3/two
• df65078 v2.0.0-rc.6
• 1fe858c v2.0.0-rc.5
• 6635117 test transition.each
• 9485837 revert 91990a1e5959c107319a4b59bfcc8f203f2a944b
• 2f6c57d transitions are iterable
• 46027fa Test transition.size.
• ca5ae84 Symbol.iterator
• 91990a1 fix crash on transition.size()
• 956f0ae v2.0.0-rc.3
• f49b6dd v2.0.0-rc.2
• 2f03929 v2.0.0-rc.1
• 6fa3c5c v2.0.0-rc1
• fcdbb3a easeVarying
• 70abf61 links

See the full diff

Package name: d3-zoom

The new version differs by 109 commits.

• debbe3d 3.0.0
• 3419879 Expose ZoomTransform constructor. (#191)
• e2f0e73 fix #235; currentTarget initialization
• c774f9e Adopt type=module (#234)
• e9aa6cb Merge pull request #236 from fidelthomet/patch-1
• 506ccf3 Docs: Update default value for zoom.filter
• 84a5e7b adding passive flag to wheel zoom event listener to remove google's warning
• db169ea v2.0.0
• 8f81ee7 d3 dependencies
• c2fa604 Merge pull request #205 from d3/two
• 28bb791 v2.0.0-rc.1
• 0fa9a21 Merge pull request #214 from d3/document-translate-tk-192
• ab4bc64 pinch-to-zoom
• a710747 Merge branch 'tapDistance-180' into two
• e02e23c Merge branch 'two' into tapDistance-180
• 87c6215 remove touch-action:none
• 96bd44b remove zoomEvent.on for now
• 3318746 introduces tapDistance (default 10 pixels)
• 5ee1a8d x and y are scaled by t_k when calling t.translate(x,y)
• 4d2a5f1 pinch-to-zoom
• 87781b6 d3
• c0fbb0f dbltap results in a touchend event being passed to dblclicked
• 0c6be96 accept subevents
• 82b6e36 in wheeled also, send args

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic